Who Owns Your DNA?

U.S. Genetics & Genomics Law and Policy Tracker

Menu

Alabama · Legislation

HB 351 (2026)

Alabama Personal Data Protection Act

View the primary source

Status
Enacted
Effective date
May 1, 2027
Last reviewed
September 2, 2026
Source review
Primary source reviewed

Summary

Alabama enacted the Personal Data Protection Act in 2026, but its requirements do not take effect until May 1, 2027. The act treats genetic or biometric data processed to uniquely identify a person as sensitive data within a broader consumer privacy framework.

Topics: Consumer Personal Data Privacy

What it requires or prohibits

Businesses meeting the act's coverage thresholds must obtain consent before processing sensitive data. Covered controllers also have duties involving transparency, data minimization, security, consumer requests, targeted advertising, data sales, and certain profiling. The Attorney General has exclusive enforcement authority.

In plain language

Beginning May 1, 2027, qualifying businesses must get consent before processing genetic data to uniquely identify a person. The act will also provide consumers with broader rights concerning personal data held by those businesses.

Primary sources

Record details

Record metadata
Jurisdiction
Alabama
Record type
Legislation
Session
2026 Regular Session
Statute citation
Ala. Code Title 8, Chapter 44
Introduced
January 29, 2026
Signed
April 17, 2026
Effective
May 1, 2027
Last legislative action
April 17, 2026
Last reviewed
September 2, 2026
Record version
1.1
Source review
Primary source reviewed
Permanent URL
https://whoownsyourdna.org/records/al-hb-351-2026/
Record history
  1. January 29, 2026: Bill introduced and referred to the House Commerce and Small Business Committee. Source: Alabama Legislature.
  2. February 24, 2026: House passed the bill as amended. Source: Alabama Legislature.
  3. April 7, 2026: Senate passed the bill as amended and the House concurred. Source: Alabama Legislature.
  4. April 17, 2026: Enacted as Act 2026-552. Source: Alabama Legislature.
  5. August 31, 2026: Record created from the enrolled act, current code, and legislative history.
  6. September 2, 2026: Project-authored analysis revised after primary-source review.
Technical metadata

Record ID: al-hb-351-2026

Topics: consumer-personal-data-privacy

Record data file: data/states/alabama/al-hb-351-2026.yaml

Help improve this record

If an official source, legal status, date, or summary needs attention, submit the record and supporting primary source for review.

Suggest a correction to HB 351 (2026)

Cite this record

Who Owns Your DNA? HB 351 (2026): Alabama Personal Data Protection Act. U.S. Genetics & Genomics Law and Policy Tracker. Record version 1.1. Accessed [date]. https://whoownsyourdna.org/records/al-hb-351-2026/

Read the complete citation guidance